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@ Access control equipment. 

Access control equipment comprises an interrogation unit 
(lU) having means (14) for emitting an interrogation signal, and 
a plurality of transponders (e.g. T). each transponder having a 
stored identity code different from that of the other transpon- 
ders. This identity code comprises a plurality of fields each 
holding a selected information bit. The interrogation signal is 
controlled so as simultaneously to interrogate the fields of all 
transponders within range in a serial manner. A group reply 
signal is sent back to the interrogation unit from any 
transponder having, in the field being interrogated, a bit 
matching that required by the interrogation signal. The 
interrogation unit is arranged to determine, from the series of 
received reply signals, the identity of each and every valid 
transponder within range. 




F1G.1. 




Q. 

tu 



Sundesdruckerei Bertrn 




Description 

ACCESS CONTROL EQUIPMENT 



The present invention concerns access control 
equipment, that is electronic equipment designed to 
restrict unauthorised access to stored or trans- 
mitted data or to secure premises. 

The control of such access is frequently afforded 
by the use of an interrogation unit and a transpon- 
der. At its simplest, the interrogation unit transmits 
an enquiry signal which may be received by any 
transponder within its range. The transponder is 
designed to modify the received signal in a predeter- 
mined manner and then retransmits the modified 
signal for reception by the interrogation unit. The 
modifying of the signal may be such as simply to 
distinguish between any "authorised" transponder 
and an unauthorised one or may be characteristic of 
the specific transponder alone, in which latter case 
the modified signal received by the interrogation unit 
identifies that transponder and no other. 

Thus, if the transponder is carried by a person, 
vehicle, animal or piece of equipment then the 
interrogation unit is enabled to permit or reject 
access of a specific person or vehicle to controlled 
premises or to control access of a person or 
equipment to stored data. For example, when the 
equipment is capable of receiving transmitted data, 
it may be permitted to do so only when it has been 
identified or authorised by a correctly- responding 
transponder. 

Many systems of operating such equipment are 
known. For example, the interrogation unit may 
permanently or at intervals create a signal or field 
that wtl( cause any transponder within range to 
identify itself. In a second system, any transponder 
coming within range will be caused to transmit an 
identifying signal to the interrogation unit. In a further 
alternative a transmission is initiated from the 
transponder and the interrogation unit processes 
the information so conveyed. 

In such systems there is generally no problern in 
making a positive identification of a particular 
transponder, so long as that transponder is the only 
one within range of the interrogation unit, or the only 
one signalling the interrogation unit at a given time. 
Unless one of these criteria is met. then there can be 
difficulties in resolving the signals from the respon- 
ders. 

A further difficulty arises when the system 
protocol is such as to cause a transponder to 
transmit its same identifying signal more than once 
when traversing any interrogation field. Under these 
circumstances, the signal could be monitored by an 
unauthorised person, and thereafter reproduced in 
order to gain illicit access. 

The present invention seeks to avoid these 
difficulties. 

In accordance with this invention, there is pro- 
vided access control equipment comprising an 
interrogation unit having means for emitting an 
interrogation signal, and a plurality of transponders 
having means for receiving the interrogation signal, 
each transponder having a stored identity code 



different from that of the other transponders, the 
identity code comprising a plurality of fields each 
5 holding an information bit selected from a plurality of 
possible bits, means for controlling the interrogation 
signal so that it simultaneously interrogates the 
fields of all transponders within range in a serial 
manner, means for sending a group reply signal to 
10 the interrogation unit from any transponder having in 
the field being interrogated a bit matching that 
required by the interrogation signal, and means in 
the- interrogation unit for converting the series of 
group reply signals to the encrypted identification 
;5 codes of those transponders within range. 

it will be seen that the equipment can operate 
irrespective of the number of transponders within 
range. The interrogation unit will analyse the series 
of group reply signals and will be informed by those 
20 signals of the identity codes of those transponders 
present. The responses are thus unable to interfere, 
and there is clear resolution of the signals. Further- 
more, it will be appreciated that a transponder only 
transmits an identity code once in one whole 
25 interrogation sequence. Further interrogation re- 
quires a different identity code from the same 
transponder thus rendering it extremely difficult for 
an unauthorised person successfully to monitor and 
decipher that code. During most of the sequence 
30 each transponder simply sends a group reply signal. 

Preferably each identity code is a binary word, 
each field comprising one bit, either 0 or 1. Other 
codes could be used, but binary is clearly the 
simplest. The interrogation and response sequence 
35 is preferably computer controlled, both in the 
interrogation unit and in the transponder, and binary 
identity logic obviously simplifies such control. 

All responders sending a group reply signal in 
response to interrogation of a particular field will do 
40 so simultaneously, desirably with an identical signal. 
It would be possible to have the responders reply 
serially, each with a different signal falling within a 
group but this is not as rapid a method as 
simultaneous reply. 
45 When binary logic is used, the transponders are 

effectively divided into classes and sets, and the 
interrogation is effectively a binary tree search. 

An embodiment of this invention will now be 
described by way of example only and with reference 
50 to the accompanying drawings, in which: 

FIGURE 1 is a diagrammatic block diagram of 
access control equipment, showing an interro- 
gation unit and one of a plurality of transpon- 
ders of the equipment: 
55 FIGURE 2 is a diagram to illustrate a tree 

search form of the interrogation process where 
only one transponder is present in the field of 
the interrogation unit; 

FIGURE 3 is a similar diagram to illustrate the 
60 tree search when two transponders are pres- 

ent: 

FIGURE 4 is a diagram to illustrate the cata 
exchange for a 16-bit identifying code of the 
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transponder; 

FIGURE 5 is a similar diagram to illustrate the 

data exchange when a new 16-bit seed is 

transmitted on each search; and 

FIGURE 6 is a similar diagram but where the 

transponder is arranged to return a hidden 

transponder code at the end of the search. 
Referring to Figure 1. there is shown an access 
control equipment comprising an interrogation unit 
tU and a plurality of transponders, which may be in 
the form of tags, one only being shown at T. The 
interrogation unit )U comprises a microprocessor 10 
one function of which is to generate interrogation 
signals and apply these to a pulse length modulator 
12. which applies the modulated signals to a 
transmitter 14. The transmitter includes a coil for 
inductively coupling with a coil of a receiver 20 of the 
transponder or tag T. Receiver 20 of the transponder 
applies its received signal to a demodulator 22, the 
demodulated signal being applied to a microproces- 
sor 24. This is able to refer to a memory 26 
containing an identifying code of the transponder. 
The microprocessor 24 determines when a reply is 
to be made, in which case it provides a reply signal to 
a phase shift modulator 28 driving a transmitter 30. A 
coil of this transmitter is inductively coupled with a 
coil of a receiver 16 of the interrogation unit and a 
demodulator 18 serves to recover the reply signal 
and pass this to the microprocessor 10 of the 
interrogation unit for decoding and identifying the 
transponder or transponders within range. The 
transmitting channel from the interrogation unit to 
the transponders may typically operate at 132 kHz 
and the reply channel may typically operate at 66 
kHz, 

The identifying code of each transponder may 
simply comprise a binary word. In use. the interroga- 
tion unit conducts a search by simultaneously 
interrogating the bits of all transponders within 
range in a serial manner. If any one or more 
transponders within range has a bit of predeter- 
mined value (e.g. 1) at the interrogated position in 
the binary word, that transponder (or those trans- 
ponders) will transmit a reply simply to indicate this. 
Then the search proceeds by interrogating another 
position in the binary word to see if any transponder 
within range has a bit of predetermined value at that 
position, and so on. By decoding the reply signals 
received from this succession of interrogations, the 
microprocessor 10 in the interrogation unit can 
determine the identifying code of each transponder 
which is within range. 

The interrogation process may take the form of a 
binary tree search. For example, in Figure 2 a single 
transponder with code 5 is assumed to be present. 
The identificiation commences by enquiring whether 
the transponder is a member of set (1.2.3,4) or set 
(5.6.7.8). The transponder responds to the latter and 
sends a first group reply signal. At level two of the 
search the choice is between (5.6) or (7,8) and (5,6) 
is identified whereupon a second group reply signal 
is sent. Finally, the transponder is recognised as (5) 
after the sending of a third group reply signal and 
analysis by the interrogation unit. It may be conveni- 
ent to regard the transponder identity as a binary 



number and each level of the search establishing l 
bit of the number. An n-bit number requires an 
n-level search and can identity 1 of 2" transponders. 
Only one interrogation is actually needed to 
5 establish to which set a single transponder belongs 
to each level. So n levels need n interrogations. Even 
for small n the search time is better than or 
equivalent to a simple polling of ever/ single 
transponder identity code, but for higher values of n 
10 the saving becomes very large. For example, 
identification of 1 transponder from 65536 is 
possible with just 16 interrogations. 

The simple search outlined above tor a single 
transponder needs to be modified if multiple trans- 
/5 ponders are present. Every member of a set must 
respond to the lU when interrogated. This has three 
implications. 

(a) If more than one member of a set is 
present all will respond. To avoid conflict they 
20 must either send identical replies simulta- 

neously (so that the lU sees only one effective 
reply) or they may send different replies in 
sequence. The former is faster and does not 
require any timing or arbitration scheme. 
25 (b) One or more transponders may be 

present in both sets at a tree level. It is then 
necessary to have two effective interrogations 
at each level instead of the single interrogation 
which was adequate for the single transponder 
30 case, 

(c) The lU must remember when members of 
both sets at a given level are present and 
search both branches of the tree frorri that 
mode to identify all the transponders present. 
35 Figure 3 shows a possible search route for the 

case where both transponder 5 and transpon- 
der 8 are present. 
The simplest (and fastest) tree search requires 
that the lU sends an interrogation data word whose 
40 length is the minimum needed to identify the search 
level. At level 1 only 1 bit is needed. Level 2 needs 2 
bits etc. The final level requires an n-bit word. 

In principle the reply need only be a 1-bit word at 
any and every level. However it is preferable for the 
45 transponder to do some processing of the incoming 
data and a 4-bit reply is a suitable compromise 
between speed and complexity. Very little time can 
be allowed between receipt of the incoming data and 
the appropriate reply to avoid impeding the search 
50 and a simple pseudo-random sequence generation 
process yielding the 4-bit reply is an adequate 
compromise between speed and security at this 
stage. This form of data exchange is shown in 
Figure 4 for the example of a 16-bit tag code. 
55 For security it is desirable that the transponder 
replies differ on successive searches. A simple way 
of ensuring this is to provide a new seed for the 
pseudo-random sequence generation at the begin- 
ning of each search. The seed would be generated 
60 by the lU (and could itself be part of a pseudo-ran- 
dom sequence). Transmission of (say) a 16-btt seed 
can replace the 1st level interrogation. This word can 
also be used as a synchronising signal to the 
transponder(s) for the start of a search, 
65 The search pattern then becomes as shown in 
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Figure 5. Note that the interrogation words for levels 
2-16 can be reduced by 1 bit. 

The transponder identity code revealed by the tree 
search is not in itself secure. It (or something 
equivalent to it) could possibly be deduced from a 
study of the search pattern and the corresponding 
replies. The security at this stage comes from the 
correct electronic and numerical forms of the replies 
and their relation to the interrogation data as 
determined by the transponder processor program. 
This is effectively the group reply signals and the 
code may be termed the public transponder identity 
code. 

Further security is provided by a verification 
procedure in which a transponder replies to the final 
interrogation with a 16-bit reply (say) generated from 
the seed provided at the beginning of the search and 
an internally stored or hidden 16-bit code (say) and 
possibly from the public transponder identity code. 
According to the stored algorithm this can only 
occur at the last search level because only then can 
no more than one transponder reply at a time. 

The hidden code is derived from the public 
transponder code and a system key or code by any 
suitable algorithm. The lU could then regenerate the 
proper hidden code (and the appropriate transpon- 
der identified by the search. 

The use of a key in the tatter method allows 
customising a transponder set to a particular 
installation. For example, if the key is a i6-bit number 
then the total effective transponder code becomes 
32 bits i.e. 4 x 10^ different transponder identities. 
(65536 transponders in each of 65536 installations). 

Figure 6 shows the information exchange for a 
typical single transponder search including the initial 
seed transmission and the final hidden transponder 
identity verification. The total data transmission to 
the transponder in this example requires 136 bits 
and the replies need 152 bits in this case. 

The public and hidden transponder identities are 
held in the memory 26 of each transponder and are 
programmable. An initial power-up during manufac- 
ture, the identity codes will be set to some known 
values. 

Programming after manufacture, and at any 
subsequent time, may be accomplished by transmit- 
ting the new identity codes to a transponder using 
an extension of the data exchange protocol outlined 
above. 

For security reasons the programming messages 
are only accepted by a transponder immediately 
following a successful search and verification proce- 
dure and must contain sufficient error detection to 
avoid false programming. 

The transponders utilised in the invention are 
desirably encapsulated transponders as described 
in GB-A-2164825. but utilising either a microchip 
processor and memory or customised large scale 
integrated circuits instead of the logic elements 
shown in that document. Each transponder may or 
may not incorporate its own battery, but if a battery 
is incorporated the transponder is capable of 
switching from and to a standby, power conserving 
mode in response to the presence or absence of a 
signal from the interrogation unit. 



It will be appreciated that in the equipment 
described, the interrogation unit uniquely identifies 
each and every valid transponder present within the 
range during one complete interrogation cycle. 

5 Preferably, as described above, the transponder 
reply signals differ on successive interrogation 
cycles and on successive search steps within each 
cycle, being encrypted according to a different 
control code (the seed) transmitted at the beginning 

fO of each cycle. 



Claims 



1. Access control equipment comprising an 
interrogation unit having means for emitting an 
interrogation signal, and a plurality of transpon- 

20 ders having means for receiving the interroga- 

tion signal, each transponder having a stored 
identity code different from that of the other 
transponders, the identity code comprising a 
plurality of fields each holding an information bit 

?5 selected from a plurality of possible bits, means 

for controlling the interrogation signal so that it 
simultaneously interrogates the fields of all 
transponders within range in a serial manner, 
means for sending a group reply signal to the 

30 interrogation unit from any transponder having 

in the field been interrogated a bit matching that 
required by the interrogation signal, and means 
in the interrogation unit for converting the 
series of group reply signals to the encrypted 

35 identification codes of those transponders 

within range. 

2. Access control equipment as claimed in 
claim 1, in which the transponder reply signals 
differ on and during successive searches and 

40 are encrypted according to a different control 

code transmitted by the interrogation unit at the 
beginning of each interrogation cycle. 

3. Access control equipment as claimed in 
claim 2. in which a valid transponder within 

45 range of the interrogation unit replies to its final 

interrogation step with an encoded signal 
generated from the control code transmitted at 
the beginning of the interrogation cycle and 
from a further identification code and an 

50 algorithm both held by the transponder. 
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@ Access control equipment. 

@ Access control equipment comprises an interrogation unit 
(lU) having means (14) for emitting an interrogation signal, and 
a plurality of transponders (e.g. T), each transponder (T) having 
a stored identity code different from that of the other 
transponders (T). This identity code comprises a plurality of 
fields each holding a selected information bit. The interrogation 
signal is controlled so as simultaneously to interrogate the 
fields of all transponders (T) within range in a serial manner. A 
group reply signal is sent back to the interrogation unit (lU) from 
any transponder (T) having, in the field being interrogated, a bit 
matching that required by the interrogation signal. The 
interrogation unit (lU) is arranged to determine, from the series 
of received reply signals, the identity of each and every valid 
transponder (T) within range. 




FIG.l 



Bundesdruckerei Berlin 



1] 



J 




European Patent 
Office 



EUROPEAN SEARCH REPORT 



THE HAGUE 



24-05-1989 



X 
Y 

A : 
O 
P : 



CATEGORY OF CITED DOCUMENTS 

particulariv relevant if taken alone 
particularly relevant if combined with another 
document of the same category 
technologtcal background 
non-wriiten disclosure 
Intermediate document 



DOCUMENTS CONSIDERED TO BE RELEVANT 


Category! Citation of document with indication, where appropriate, 
1 of relevant passages 


Relevant 
to claim 


Y 
Y 


US-A-4 071 908 (BROPHY et al . ) 

* Figure 1; abstract; column 1, line 1 

- column 7, 1 ine 29 * 


1 

2.3 


Y 
Y 


US-A-4 303 904 (CHASEK) 

* Figure 3; abstract; column 2, line 64 

- column 4, line 5 * 


1 

2,3 


A 


IEEE TRANSACTIONS ON COMMUNICATIONS, 
vu 1 . («un jd, no. i^, uecGmDer 1984, 
pages 1294-1298, IEEE, New York, US; D. 
TOWSLEY et al.: "On adaptive tree 
polling algorithms" 
* Pages 1294-1298 * 


1 


A 


INTERNATIONAL SWITCHING SYMPOSIUM. 
Kyota, 25th-29th October 1976, vol 1 
pages 143-2-1 - 143-2-8, Tokyo, JP; h! 
MORI et al.: "Binary-search polling - 
another technique of multiple access 
control " 

* Pages 143-2-1 - 143-2-8 * 


1 


A 


GB-A-2 116 808 (SENSORMATICS 
ELECTRONICS) 

* Figures 1,2,7; page 1, line 6 - page 
4, line 11 * 


1-3 


A 


EP-A-0 161 779 (SENELCO) 

* Figures 1,2; abstracts; page 1, line 

16 - page 6, line 14 * 


1-3 


The present search report has been drawn up for all claims 

PIJM of tr.mh n„, „, „„u,i , ., . 





Application Number 



EP 88 30 2888 



CLASSIFICATION OF THE 
APPLICATION (Int. CI. 41 



G 07 C 9/00 
H 04 L 11/16 



TECHNICAL FIELDS 
SEARCHED (Int. Cl.4) 



G 07 F 
H 04 L 



Ejtasaner 

NEILL A. P. 



T : theory or principle underlying the invention 
E : earlier patent document, but published on, or 

after the filing date 
D : document cited in the application 
L : document cited for other reasons 

A : member of the same patent family, corresponding 
document 



